CVE-2015-3749

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3737

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3750

CVE-2015-3750 concerns WebKit in WebKit-based components (e.g., Apple Safari, WebKit2) where Content Security Policy report requests did not have enforceable HTTP Strict Transport Security (HSTS). The failing behavior allowed a MITM to sniff sensitive data or spoof CSP report data, including cook...

CVE-2015-3730

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3750

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforce the HTTP Strict Transport Security HSTS protection mechanism for Content Security Policy CSP report requests, which allows man-in-the-middle attackers to...

CVE-2015-3736

CVE-2015-3736 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption. Public details in the provided...

CVE-2015-3743

CVE-2015-3743 is a WebKit vulnerability affecting Apple WebKit used by iOS Safari (and related WebKit builds). The issue allows remote attackers to run arbitrary code or cause memory corruption and application crashes via a crafted web site. Affected products/versions are listed in the descriptio...

CVE-2015-3735

CVE-2015-3735 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8; 7.x before 7.1.8; 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption leading to an app crash. C...

CVE-2015-3741

CVE-2015-3741 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Root c...

CVE-2015-3731

CVE-2015-3731 affects WebKit as used in Apple iOS < 8.4.1 and Safari < 6.2.8, 7.x < 7.1.8, and 8.x

CVE-2015-3747

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3743

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3735

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3751

CVE-2015-3751 affects WebKit in Safari (and iOS) prior to versions 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to bypass a Content Security Policy protection by exploiting a video control in conjunction with an IMG element within an OBJECT element. Exp...

CVE-2015-3752

The CVE-2015-3752 issue affects WebKit’s Content Security Policy handling in Safari (and underlying WebKit in iOS) prior to specific updates. The root cause is improper restriction of cookie transmission for CSP report requests, enabling potential leakage of cookies via cross-origin requests or p...

CVE-2015-3737

CVE-2015-3737 affects WebKit (as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8) and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site (memory corruption and app crash). Public references indicate ...

CVE-2015-3733

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3746

CVE-2015-3746 affects WebKit used in Apple iOS (before 8.4.1) and Safari (before 6.2.8), as well as WebKit2-based stacks in Linux distributions. The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption and an application crash via a crafted web site. Public r...

CVE-2015-3738

WebKit vulnerability in Apple software: remote code execution or memory corruption/DoS via a crafted website. Affected: WebKit as used in iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. Root cause described as memory corruption leading to app crash; no remediatio...

CVE-2015-3753

CVE-2015-3753 affects WebKit used in Apple Safari (before 6.2.8, before 7.1.8 for 7.x, and before 8.0.8 for 8.x; on iOS prior to 8.4.1). The root cause is improper taint checking for CANVAS elements, which could allow remote attackers to bypass the Same Origin Policy and exfiltrate sensitive imag...